7763 matches found
The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through...
CVE-2020-9522
Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, Affecting versions 7.0.x, 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...
PT-2020-17854 · Helm +1 · Helm +1
Name of the Vulnerable Software and Affected Versions: Helm versions 3.0.0 through 3.2.3 Description: A path traversal attack is possible when installing Helm plugins from a tar archive over HTTP, allowing a malicious plugin author to inject a relative path into a plugin archive and copy a file...
DEBIAN-CVE-2020-0543
Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Code injection
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 discloses highly sensitive information in plain text in the virgo log file which could be used in further attacks against the system. IBM X-Force ID: 181779...
PT-2020-1264 · Sqlite +9 · Sqlite +9
Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.3 Description: The issue is related to a heap overflow in SQLite due to the misuse of transitive properties for constant propagation, which can lead to local information disclosure. This is caused by a missing...
PT-2020-3024 · Ijg +1 · Libjpeg +1
Name of the Vulnerable Software and Affected Versions: IJG JPEG aka libjpeg versions prior to 9d Description: The issue is related to the jpeg mem available function in jmemnobs.c in djpeg, which does not honor the max memory to use setting, possibly causing excessive memory consumption. This cou...
CVE-2020-9645
Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery ssrf vulnerability. Successful exploitation could lead to sensitive information disclosure...
shifter.sapo.pt Improper Access Control vulnerability OBB-1193475
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-0205
In the DaalaBitReader constructor of entropydecoder.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the media server with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2020-0191
In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...
CVE-2020-0147
In btuhcifescoconnectionchgevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2020-0154
In nciproccorersp of ncihrcv.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product:...
PT-2020-3023 · Ijg +1 · Libjpeg +1
Name of the Vulnerable Software and Affected Versions: IJG JPEG aka libjpeg versions 8 through 9c Description: The issue is related to an out-of-bounds array read in the jdhuff.c component of the libjpeg library, which can lead to the disclosure of protected information or cause a denial of...
UPnP denial of service vulnerability
UPnP is a Universal Plug and Play protocol from the Open Connectivity Foundation. A security vulnerability exists in versions of UPnP prior to 2020-04-17. An attacker could exploit the vulnerability by sending traffic to an arbitrary location with the help of the SUBSCRIBE feature, resulting in a...
CVE-2020-13844
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."...
PostgreSQL JDBC Driver Code Issue Vulnerability
PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A code issue exists in PostgreSQL JDBC Driver PgJDBC versions prior...
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of IBM WebSphere. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the IIOP protocol. The issue results from the lack of proper...
Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-32795)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to allow traversal of paths for data disclosure...